This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
GlobalProtect Discussions
GlobalProtect discussions offers topics about our network security for endpoints that protects your organization's mobile workforce. This area is dedicated to GlobalProtect discussions to help you answer questions.
About GlobalProtect Discussions
Welcome to the GlobalProtect discussion area! Here, you can engage in conversations about GlobalProtect, explore new insights, and stay updated on ongoing discussions. Check back regularly for the latest updates and community insights on GlobalProtect.

Discussions

Start a conversation

Global protect linux OS DNS

Hello, We have a use case in which we have say example.com resolving internally(on-prem) to 10.1.1.1, this will resolve internally while you are connected to the corporate network using the corporate network DNS servers. the global protect clients are also pointed to the internal corporate DNS servers. So all the traffic for DNS comes through th...

GPVPN Authentication issue

Hi Team, We have configured GP VPN with AD authentication and MFA . The AD authentication is working but the MFA is not working which is our next level authentication. So kindly help us to resolve this issue. Also using username and password we are able to connect the network also using the 2FA we are able to connect the network but after co...

SANKETM by • L1 Bithead
  • 2198 Views
  • 1 replies
  • 0 Likes

Global Protect Always On VPN Auto Connect

Hi looking to get some feedback. Currently we have on-demand global protect VPN connection (user inisitates the VPN connection, puts username/password). They have full access to internet via laptop (w.o any traffic inspection) if there is no VPN tunnel and they are off-prem. Our company wants to move away from that and force auto VPN connecti...

PenTest GlobalProtect Subnet

Hello, Our Palo GP is setup inside Azure - and it is working and serving its purpose. GP can reach everything, but not the other way around. We can't ping GP Clients, we can't RDP to them, any traffic destined to GP Subnet has literally no logs at all. Looking for some expert advice. Thanks in advance.

Resolved! iOS VPN on-Demand with client certificate - Reboot and no VPN Connection

Hey community, we are currently trying to enroll iOS Devices with an always-on VPN Connection and authenticated by client certificate. A lot people turn their iPhone over night off and start it at the morning, while the iPhone is still locked WiFi is not enabled and I guess the client certificates too. So mobile data is active which is tryin...

GP VPN Authentication issue

Hi Team, We have configured GP VPN with AD authentication and MFA . The AD authentication is working but the MFA is not working which is our next level authentication. So kindly help us to resolve this issue. Also using username and password we are able to connect the network also using the 2FA we are able to connect the network but after co...

TechData by • L1 Bithead
  • 2111 Views
  • 1 replies
  • 0 Likes

Global Protect

Hi Friends, We have a requirement related to global protect. Condition: User tries to connect to global protect and fails to login. If he tries for three or more times to connect to global protect and fails to login an email alert should come to my mail id. I have configured email alerts in my firewall but can we specifically customize by ab...

Satyak by • L3 Networker
  • 1853 Views
  • 2 replies
  • 0 Likes

Defender for Identity VPN log integration

Hi all, Has anyone been able to configure a PA firewall to forward Radius messages to a MS Defender for Identity sensor as per Microsoft Defender for Identity VPN integration in Microsoft 365 Defender | Microsoft Docs We are using Azure AD for Global Protect authentication, so not sure that it's possible to send to Radius if not using it to au...

pfox001 by • L0 Member
  • 4507 Views
  • 2 replies
  • 0 Likes

Resolved! Giving users the ability to select a different gateway

We have multiple gateways in our environment. Our default agent profile has always on configured. Users are balanced across the gateways. We have a troubleshooting profile that gives users the option to disconnect and choose to try and switch to a different gateway.My question is that I would like to configure a profile that is always on but giv...

StephenGilder_0-1685048856353.png
StephenGilder_2-1685049001421.png
StephenGilder_3-1685049646305.png

Resolved! Global Protect Internal Gateway "Not Connected"

I have a PA-440 running 10.2.3-h4. I have a working external GlobalProtect gateway and created an internal gateway. I have enabled "Internal Host Detection" added the internal gateway information to the config of the portal. After trying to connect, the main GlobalProtect screen shows "Not Connected" with "Select the portal to connect and sec...

jwalls by • L0 Member
  • 9871 Views
  • 2 replies
  • 0 Likes

SAML and GlobalProtect

Hello, We have 4 vCPU PaloAlto NGWF Firewall. We are using GlobalProtect for Remote Access VPN Service. Now we would like to enable 2FA via Azure (SAML). I tried to do configuration as it showed in Palo Alto article: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g0000008U48CAE I can login into Portal with AD Credentials, b...

Can't use bing chat when I connected to VPN?

Hi, I found that after March 25th, when I was connected to a VPN, I was no longer able to use bing chat. Bing chat said: "Sorry, looks like your network settings are preventing access to this feature." But if I disconnected from VPN then everything works fine. I have been tested on two different machines, macbook and windows laptop. Any idea? ...

cycheng by • L0 Member
  • 3600 Views
  • 1 replies
  • 0 Likes

GlobalProtect Agent v6.0.0 showing strange Characters

Hi LIVECommunity, Has someone else seen this behavior on the GP Agent? All of a sudden it started showing strange characters. The agent is installed on a Windows10 with the Spanish language. By the way, the agent works fine (I can connect to the VPN), It's just an issue with the characters. We already tried re-installing it but no luck... We ...

v6.0.3.png

Resolved! Unable to use the internet when connected to Google Pixel 7 phone hotspot with GP VPN

When using my Google Pixel 7 Phone's hotspot with my laptop, the internet works fine, except when connected to Global Protect VPN. As soon as I connect the VPN (and it does connect), the internet connection is blocked. Websites do not come up in the browser. Details: Phone Pixel 7 Pro Android 13 Network - T-mobile I have tried creating a ne...

Translate web app url of globalprotect clientless

Hi, Could we hash or hide web app url of globalprotect clientless ? this is required since when client access the web app, the path of internal web apps are not hidden or hash. This is example of the default url format https://globalprotect.customer.com/http/internal.webapp.com/home/login Expected result is web app is hidden like this http...

  • 1675 Posts
  • 68 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks